The Western Hoser

Shared Services Canada's New Password Policy is a Stroke of Genius

By Samantha Stone

OTTAWA - In a bold move aimed at improving cybersecurity, Shared Services Canada (SSC) has mandated a new password policy that requires public servants to use a proper noun with the first letter capitalized, followed by two or more numbers.

The policy, which went into effect last month, has been met with widespread approval from SSC employees, who say it’s a welcome change from the previous password requirements.

“I think it’s a brilliant policy,” said public servant Sandra Johnson. “It’s so easy to remember, and it makes it almost impossible for someone to guess my password.”

Indeed, many public servants have already adopted the new password format, with “Justin01” and “Trudeau02” among the most popular choices.

But not everyone is impressed with the new policy. Mary Sanderson, a software engineer and self-proclaimed “expert” on cybersecurity, says the new password format is a “disaster waiting to happen.”

“Have these people ever heard of entropy?” Sanderson said in an interview. “Passwords need to be long and random in order to be secure. Using proper nouns and predictable numbers just makes them easy to guess.”

Despite Sanderson’s concerns, SSC officials remain confident in their new policy.

“We understand that some people may have reservations, but we believe this new policy strikes the right balance between security and usability,” said SSC spokesperson Jane Smith.

And for the most part, SSC employees seem to agree.

“I don’t see what the big deal is,” said public servant Mike Thompson. “I mean, sure, my password is just my girlfriend’s name and our anniversary date, but who’s going to guess that?”

Only time will tell whether SSC’s new password policy will actually improve cybersecurity, but for now, public servants can rest assured that their passwords are at least easy to remember.

Except for the “expert”, Sanderson, who resigned from her position at SSC after the new policy was put in place.